09b6f3105434078272bbbb3b0fee27cee2d7e8831325d3b37232c7bf1542cce4

Resubmissions

02/10/2026, 23:28

261002-3f9ljsxt6r8

02/10/2026, 23:28

02/10/2026, 23:25

02/10/2026, 23:23

02/10/2026, 23:20

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KralSMP-CurseForge.zip
Size 18.1MB
Sample261002-3ef8lsxt4l
SHA256 09b6f3105434078272bbbb3b0fee27cee2d7e8831325d3b37232c7bf1542cce4
MD5 600001454747f8ddab784726ee71d6e7
SHA1 5657aeb533be10f9795b01a48420e97652219807
SHA512 2f5914a321cc6969b37fd02af3ad0b52da67113a6488b7c70b6acd61c9860d7ad14ac23c97bf112db5ede3cdcc7c3c0a8ef3480f5d385080db4cf29a3ae19d18
SSDEEP 393216:Ay508skSVl4GM+QnOnW5eT+MvHcfXLI7Ac+H3aKI2b3xHrZcP0PJ1MRYerTG:Ay508skGlfKnOnLKmwbI7Ac63a67xHr/
TLSH
T14017330D45FF87E88882718E80C1B779F649D6E20BA4C8E5BF7367A109F587AD4985F0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3324	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{3D91BE2F-E03F-4EED-9E15-A66C9BDF4D58}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 1284 wrote to memory of 3880	1284	msedge.exe	104
PID 3880 wrote to memory of 4660	3880	msedge.exe	105
PID 3880 wrote to memory of 3324	3880	msedge.exe	109
PID 3880 wrote to memory of 1704	3880	msedge.exe	110
PID 3880 wrote to memory of 976	3880	msedge.exe	111
PID 3880 wrote to memory of 1704	3880	msedge.exe	110
PID 3880 wrote to memory of 1704	3880	msedge.exe	110
PID 3880 wrote to memory of 976	3880	msedge.exe	111
PID 3880 wrote to memory of 3632	3880	msedge.exe	114
PID 3880 wrote to memory of 3632	3880	msedge.exe	114
PID 3880 wrote to memory of 3632	3880	msedge.exe	114
PID 3880 wrote to memory of 1508	3880	msedge.exe	112
PID 3880 wrote to memory of 1508	3880	msedge.exe	112
PID 3880 wrote to memory of 1508	3880	msedge.exe	112
PID 3880 wrote to memory of 1048	3880	msedge.exe	115
PID 3880 wrote to memory of 1048	3880	msedge.exe	115
PID 3880 wrote to memory of 1048	3880	msedge.exe	115
PID 3880 wrote to memory of 560	3880	msedge.exe	113
PID 3880 wrote to memory of 560	3880	msedge.exe	113
PID 3880 wrote to memory of 560	3880	msedge.exe	113
PID 3880 wrote to memory of 5052	3880	msedge.exe	117
PID 3880 wrote to memory of 4772	3880	msedge.exe	118
PID 3880 wrote to memory of 5052	3880	msedge.exe	117
PID 3880 wrote to memory of 4772	3880	msedge.exe	118
PID 3880 wrote to memory of 4412	3880	msedge.exe	120
PID 3880 wrote to memory of 3456	3880	msedge.exe	123
PID 3880 wrote to memory of 3456	3880	msedge.exe	123
PID 3880 wrote to memory of 3456	3880	msedge.exe	123
PID 3880 wrote to memory of 1248	3880	msedge.exe	124
PID 3880 wrote to memory of 1248	3880	msedge.exe	124
PID 3880 wrote to memory of 1248	3880	msedge.exe	124
PID 3880 wrote to memory of 4120	3880	msedge.exe	125
PID 3880 wrote to memory of 3832	3880	msedge.exe	126
PID 3880 wrote to memory of 4928	3880	msedge.exe	127
PID 3880 wrote to memory of 3632	3880	msedge.exe	128
PID 3880 wrote to memory of 3632	3880	msedge.exe	128
PID 3880 wrote to memory of 4412	3880	msedge.exe	129
PID 3880 wrote to memory of 4412	3880	msedge.exe	129
PID 3880 wrote to memory of 3860	3880	msedge.exe	130
PID 3880 wrote to memory of 3860	3880	msedge.exe	130

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\KralSMP-CurseForge.zip
1⤵
PID:4780

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x254,0x7ffd9467c188,0x7ffd9467c194,0x7ffd9467c1a0
    3⤵
    PID:4660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,17166599230494813517,1502414859723818951,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,13629599771030144529,18205243278575346403,262144 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:2
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,14368225458079616527,16811392875162813636,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:8
    3⤵
    PID:976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3032,i,11866135048453319283,8364065265224307450,2097152 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
    3⤵
    PID:1508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3036,i,3623853585306819178,1202995287023634962,2097152 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
    3⤵
    PID:560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3296,i,10758804564070273420,11587292122087957236,2097152 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
    3⤵
    PID:3632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3308,i,7063644721846281761,16796603872886149840,2097152 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
    3⤵
    PID:1048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,1485091150676391113,2388278003665630211,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
    3⤵
    PID:5052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,3018806167712160844,3994872093186073063,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
    3⤵
    PID:4772
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,10178914127246759590,5927340252543841420,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
    3⤵
    PID:1992
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,10178914127246759590,5927340252543841420,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
    3⤵
    PID:4412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6140,i,9492693612446216225,14655832059989268927,2097152 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:1
    3⤵
    PID:3456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6280,i,13134459151642209008,5342088621653197157,2097152 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
    3⤵
    PID:1248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,5093853372234354934,618565600230833260,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:8
    3⤵
    PID:4120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,9237945467178957759,11513312910646719324,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=556 /prefetch:8
    3⤵
    PID:3832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,6162403684066968051,13298745038663352428,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
    3⤵
    PID:4928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,5461222640319541753,11393247889045628194,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
    3⤵
    PID:3632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,13729870069166603067,13950626057208569493,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
    3⤵
    PID:4412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,16636147403044293200,14305453460370727241,524288 --field-trial-handle=3836,i,15340627853068602946,10726171035570767902,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
    3⤵
    PID:3860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

59f3f1d3-4ba7-450e-8ec9-0eb705b2554d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\59f3f1d3-4ba7-450e-8ec9-0eb705b2554d.tmp
Size 8KB
SHA256 3d3a0a82e96a07338fca3aee4ef9403984630fd6e2a12b2bef20a3bff2cebb0f
MD5 799547b1fae2bd956917443f49afc18f
SHA1 32d5621d3136e1278ced85c9b3eecc26a97e8b88
SHA512 5d4d77ffd87caebeb7ce78346be4d5e42a3080c32f69230f384ca98b1064af4a7055c2ac6e2352e57c1cca5cb66196029d1df7a6b6c944052c74a96a18fbdcdb
SSDEEP 192:aONg6IE7QmiUyAtTPuIGmYMgjzoFGtC7sukU6:aONg6DtzPuIGmYMoUVsfU6
TLSH
T181020A35AC787CAB9FB36D49F4472B236FA5112BE5952F84EAE81B1C00D725C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d307dc4-1232-4918-8a67-1bfb0c44668f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d307dc4-1232-4918-8a67-1bfb0c44668f.tmp
Size 11KB
SHA256 8215b71738e2212d583e064bc90eccf68955e049aa1057c6bbea16c85896aee2
MD5 49a078e2b84b3070c9d54e2a56c7e725
SHA1 339e8041baec3436bf523d3e75b9ce677d05bdfa
SHA512 ad293230201649b8634e581b9b1add3236f063d00978c38beb09b7d57573adfc5221de87fd72b451f890119ef4198103cdf2039e6faca15e40abfbb52cf1031c
SSDEEP 192:ztLsNcrQRug9E1lkQmiU1g3d4zIGmYMgjzoFG8MXXxeU597iMqtUn:zRsNcrp31OsyzIGmYMoULMXXpi7Un
TLSH
T11E321A36AC74BC6B5EE3A545F04A3A13AEB54227D6882F84E6DC6B1C01DF25C131F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c4bd710-1355-4662-a7a0-9fc1f9bae64c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c4bd710-1355-4662-a7a0-9fc1f9bae64c.tmp
Size 14KB
SHA256 ad79a0aa317352cec788f11652563411b509fc217fbd78cc60f239c8695d313c
MD5 991636fb5b3fd284454b30ca6f906280
SHA1 8532b7853c58548a80eab65644aa636d194ae8ba
SHA512 2ce909a93df62aa5b80b91a783a3e5f56b87ef85c7331599a61a56a73e811f9ca883607d8e331ad91081a919054d43d0f11d22249de03d80cc36bb62aaef2bae
SSDEEP 384:zOzsNZrp31OsyH3faVeIGmYMoULMXXPi7UI:KcHqHMXMnPi7UI
TLSH
T10D620835ECB4EC779DF79284B1077653AEB4025796892F84DADD2A1C068B2AC131FC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

870df6eb-4221-4e3f-8e1c-c03d59e1ba6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\870df6eb-4221-4e3f-8e1c-c03d59e1ba6a.tmp
Size 8KB
SHA256 79b9ecceea84cdfa8d15601dafdf186110ceed278254de80059183f7f7971944
MD5 661bea79946c810afbbffc29084a1302
SHA1 328e0c5df78e0f1ffcbbac2ddf296632d66608ae
SHA512 4aaed5fcaa7bcaa95c1220d006544c852c82430a9f02a2fbb2b738dd200fb00a988e51930ac3c177d974adcb018be3dcba5ccf0af23272195c92c0bd1139a30e
SSDEEP 192:aONd6IEQQmiUyGtTuuIGmYMgjzoFG8MXXxeU927HMqtU6:aONd6DQjuuIGmYMoULMXXUH7U6
TLSH
T120120B369C78BC6B5EA3A945F44B3A135EA5421BD6896F80E6DC2B1C01DF25C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

4443e22c-bdb1-4a1e-a554-6fae0da5058b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4443e22c-bdb1-4a1e-a554-6fae0da5058b.tmp
Size 9KB
SHA256 e378b10e1a37df349590e7885d90232ea3bec2d57567a0968ddf62aff31d1de4
MD5 c803341bf1119f32f8a76d9bed3911cc
SHA1 9e993bcc79d09996e6cb5e08e4d86a7c89e7dbf5
SHA512 d0282093e3f043b53855f1e770a2a62358a84ae38d738ce7beed135567560f474da55b9dcf910b2374f792fd634ec29017369948fa07f884ec43a58963779258
SSDEEP 192:sxZlla4/fVsNuwgYdpJHW6+WNGYapUJcuIg4J:sxZlc4/fVsNuOJHbGvGc
TLSH
T1AE12B6526E28A47B8CCBE20DBB25BF13D6F9503291D01E48E6FC961C09E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b9f0161-0fd4-4381-8f65-941e535f2a8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6b9f0161-0fd4-4381-8f65-941e535f2a8d.tmp
Size 9KB
SHA256 7d1fb876dd535e6e806e074f302b8d9f2cb077a192cb0c828fa6293320d3c32b
MD5 f280294bfb36c16e32340f9d8a89a565
SHA1 475f0c64f96af288cd9fe36875eb88b3e99ff331
SHA512 5003f636e14dfcfa3c7efa60b3a5c6b084d5d9d45d7f5124fff8a728a008ea8e81aed2c0456360d9ee71c5b0c48817e2b5094fe4e1e588998bd7df5b9e78fdab
SSDEEP 192:sxZlla4/fVsGuHgYdpJHW6+WNGYapdJcuIg5yJ:sxZlc4/fVsGuvJHbG+Gs
TLSH
T19522C7526E28A97B8CCBE20DBB65BF13D2F9503290951E48A6FC861C05E76DD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75de93ad-c41a-4b55-8952-7898a142110e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75de93ad-c41a-4b55-8952-7898a142110e.tmp
Size 9KB
SHA256 a1ce96ecdbe3b53179f532fea0e4962fb82a2271a09d396d8b488cedde92b122
MD5 9be3a79a190f03080a1c195938d68686
SHA1 c75aaa1e783b39290eaafc8714cd6a519a6a958f
SHA512 cefd1de77618ff14db465783b39d655433487a759dd9b13c468113c01941545ed3dee7d79bf71035cd0309cdea9dc615df03f4d68e3e0048b32929131ba5752d
SSDEEP 192:sxZlla4/fVsGuHgYdpLHW6+WNGYapBJcuIg5yJ:sxZlc4/fVsGuvLHbGGGs
TLSH
T17F22D8526E28A97B8CCBE20DBB65BF13D2F9503291951E48A6FC861C05E77DD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c856947-262a-44a5-a2b2-4ec7b4b616ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7c856947-262a-44a5-a2b2-4ec7b4b616ad.tmp
Size 9KB
SHA256 af489eec0b52184951fff655685e20dcd1fdfc85304fce1a05dd381481f7a4b8
MD5 a3c9229f8cbacfd76af5730a09fc7ef1
SHA1 d40ca498e979aaff68a2a613958a6e5801306343
SHA512 9c7e000ceaefa14f810e8dbea22e62fcfa9d1020432d7862e43afdcce12b7ee30a3ef79b708006c87366dd6041af6a1e1e9d82bb827dce46eaab465c80d6eee8
SSDEEP 192:sxZlla4/fVsWuHgYdpJHW6+WNGYapYJcuIg5cJ:sxZlc4/fVsWuvJHbGLGC
TLSH
T15812C6526E28A47B8CCBD20DBB65BF13D6F9503290D01E48E6FC961C09E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 be42ab20d38b29a7856df358edb0e26a526c90e4175864dfdeee690992ca5d17
MD5 e1e0d913eb30e77aca308ba2d2e85a2a
SHA1 c32fcf66a7f48059fe86c3fae8c5abfbbe8e81db
SHA512 b52ca49d6784ed28b6dd58a2f374a8c15f59b26a85c16d554290ad12a6cc66f4d3f9a43030095da7d6bb684a4a0bbc38d3532aa50e1f1f9f05d43573ded4de2d
TLSH
T179E026E614E9C32EF24C688F1178830E9BA5361BA6C0698E1704C68C76054C0BEC2EB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 04d002b202dbdb85d5da11e0a0cc451ece947049bfb70d9d6cd54d04637f45a6
MD5 9f71f36268ab3d1ac332960f33b8b078
SHA1 1be509fbca25534352b500c9299f653900d30e9b
SHA512 f294a3144f704f1d4e22427e5f739165a486c64589033f04419d215fdc1f42aec7b6cfcf84ea1425435fe4936179dd573f7080fd24243bf15db70a0745fa229a
TLSH
T16DE020D507D8C33DB308785F5174830CC7C1361BA2C4694D1704C5867647CC5E3C1AB0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d2eb39836ea10a189f84814855b56d53d6ab1e3df36a2cc002430614796a0ca8
MD5 8eea8aa7a839cf411622360c677f5541
SHA1 39761639f87271b60320955b1befc09108a4ab1a
SHA512 9e87f15017be61e2b86784a80abd3882633b09a0768089ee60a49980fa9c119e3099a898e0ceb4d16925fc8c81d65dc30b61e9c50b948e8dfe960e1910500a42
TLSH
T12261808C9B1DC3F1F7F9837E80E523473B72C58185834D420A9BD478889A3E7923B010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 68d800ff7d002480f588886dfcb441a3c769ad9f4b0d9fbac17f7abf63f432cf
MD5 112978539af4f566203be1f8d95c47e5
SHA1 e7e450639c371a2e5f079807382e9b8502662fbd
SHA512 acc61ddb17d4f34a5afaf555c65e65d2eb596380a5777a5d6669cd9ebf15d17519f76d3b8a6b42d5d15de2b7c349eeee823a939080e12a0919e52416077e4734
TLSH
T10361808C9B1DC3F1F7F9837E80E523873A72C58194834D420A9BD478889A3E7923B010
MD5 SHA1 SHA512 TLSH

Submit Download

77fb7a13-5d48-4ccc-a3c2-7eb6c319cff2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\77fb7a13-5d48-4ccc-a3c2-7eb6c319cff2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

213c223f-4d2b-4e13-8ea6-54c2fbf8eb72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\213c223f-4d2b-4e13-8ea6-54c2fbf8eb72.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c05a0d49-cb81-4b47-9e59-b1ee1c2c6531.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c05a0d49-cb81-4b47-9e59-b1ee1c2c6531.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b7ab0f423952337aa7688e55c01f250a19e69074344ed5379c67766bb9bc8313
MD5 3d85a86159ff7bdc6850caddeeadd0f6
SHA1 0c36375dbceb4dd89765cd93a14194be2d29970d
SHA512 1f591ccfd1f8f117e16521137ab04b4e06817983affdc74112054696d28ecf386eec23d1d9fe72266f2e55ed79b04129f59e7edac3d17ce940ad53c4ec7e1632
SSDEEP 48:K0KV4kKIYJbUzEIScJK9A16JxyZYLs46yLCNQ8CgARbcrMISURK9Y1iRxaBYDUcs:KgZKK6Aimd6KmkBfeKQoOp
TLSH
T14391881234BB520138BD2E4C88A5866A458130F3305DA9BFFBBD40625E2FE499DFDDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8b7a0e8-3157-4e00-8187-b25485b0291c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8b7a0e8-3157-4e00-8187-b25485b0291c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfd47cba-217c-4862-b884-4f35dca9f67c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bfd47cba-217c-4862-b884-4f35dca9f67c.tmp
Size 27KB
SHA256 48e44a2a4b5ceac32d6157682f5c47f1326e36d021c2c09116765dbffe1afe6b
MD5 e0f9979bf484796aabd083ecc6655b3a
SHA1 171f60e073710c955d7b956030d04c4f42bd12d8
SHA512 ecbd3213d8f4dc67a3cfb2c006656c6c73aaf1f0d685a6bf406fab354b636823d10b49098e65eefe96f2fb1cc809e01845f2c85397c121480722b0f63da10e07
SSDEEP 768:26WPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7xro4pfevmRd:26WPcLKWvKeEeu1jaClLiF7K4pWvmRd
TLSH
T10EC2EA3B640CCB7E5FC01E9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8d3d050-e72d-4230-ba79-2bec423d9b45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f8d3d050-e72d-4230-ba79-2bec423d9b45.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

aeef190b-6eb3-4020-9bc4-8ba8dc76b799.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aeef190b-6eb3-4020-9bc4-8ba8dc76b799.tmp
Size 14KB
SHA256 5bcfd1d6803609d9e08a22106543589dffff834d74447197ddb3c1bbefa11c9c
MD5 d434175c8c58e8c09f7c082d5d2fc3d6
SHA1 63a34fec2b435862c1953210633fe9e4c76f5259
SHA512 bb2a1fe8952253a29c8723cce24ac0665b86a31fdbd2ab35c25498e237b2df4afe05d577e9d57a9fd7f9983d2533dcb2d445bebc79aa8a31f3f6a53b4aae2a0c
SSDEEP 384:zOzsNcrp31OsyH3faVeIGmYMoULMXXXSi7UI:KNHqHMXMnXSi7UI
TLSH
T123620835ECB4EC779DF39284B1077653AEB4025796892F84DADD2A1C069B2AC131FC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afada250-1b73-42b6-93a5-0f469ce17d4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\afada250-1b73-42b6-93a5-0f469ce17d4a.tmp
Size 11KB
SHA256 ac125dca714ab0a2b5dc3be527d09bbf86aa4b4a18a6d345e39fdb4a8b44c743
MD5 1f95772c207aa8bbbe5eb11cb7cd70d9
SHA1 f2799e668cb14bc7d879720ec589f778753a93cf
SHA512 d2e3ce8475c532af7cacb38acd6e348e615a5a0e551c8a91b2b85d2db2f942cf1200d77cc1520d355d228b541b34349b2ed87b9e3a0aeafab4355e6ae9b668cb
SSDEEP 192:zhLsNcUQRug9E1lkQmiU1g3d4zIGmYMgjzoFG8MXXxeU597iMqtU8:z9sNcUp31OsyzIGmYMoULMXXpi7U8
TLSH
T1AE322A36AC74BC6B5EE3A545F04B3A13AEB54227D6882F84E6DC6B1C01DF258131E91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27619ea7-5c9b-45ad-8c20-1194d6036dda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\27619ea7-5c9b-45ad-8c20-1194d6036dda.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 80176f449c9d8abc1fcd11fa9d54275f7976d20ce4be8a13178582eff3339ffb
MD5 ca3801abaa507631d6433b6bc6af8df1
SHA1 244f9a83f2a337bba53487526b50fc6d3febf7b1
SHA512 3d8e75c0b43d40607d23df00cff92aff7273733f52230b828110c3a7cbf8fdfaa99c1e5c1262a80ce46f94a8344ecc134403987b27e2955515f788d3324f82d7
TLSH
T138413A58B6E91148B3737E56ABF6B86E887B7C772E07D59E10010E4F0A23A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads